$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0445ba-264f-3e95-8963-7b44e2dea9ed.roa File: fd0445ba-264f-3e95-8963-7b44e2dea9ed.roa (raw, json) Hash identifier: daNIyeoAXFbhXIfLE/oeDqgjaOJPf4dhqtt1LtlqgWs= Subject key identifier: 02:11:15:A2:4E:AF:FD:2C:69:6C:06:51:7E:8F:84:7D:45:AD:2F:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707EDBEC3DCE8CCBAE63620 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0445ba-264f-3e95-8963-7b44e2dea9ed.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 396564 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:ed:be:c3:dc:e8:cc:ba:e6:36:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=3a48d3b3-8ebc-415f-9eb9-377b348d50b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:19:6c:63:ff:a2:bf:41:21:7e:d8:70:8f:a7: 9a:d4:2a:7a:70:3a:54:ca:5e:71:63:e9:fa:ce:3d: bc:57:91:65:ac:f3:d1:10:c7:b2:c6:a5:24:9e:1e: 6a:37:59:42:04:1b:1f:96:5e:02:9c:6a:76:20:78: 36:1a:af:3e:0f:6d:9f:c7:cf:2f:92:f7:76:78:25: 21:f8:37:e1:49:a5:4c:d2:2d:da:69:90:d0:6e:50: 52:ba:dd:41:a7:c3:33:ea:1e:13:bb:dc:d7:4d:eb: f3:98:21:01:7e:c9:d8:ec:fc:ba:9c:0a:92:46:b4: bc:34:97:0e:e3:cf:a9:ad:f3:41:5c:21:ac:8c:39: 15:65:91:d7:e8:ac:c3:20:83:4e:e8:45:29:99:97: 63:b0:55:e0:89:81:df:d4:e0:7b:69:80:2f:26:3d: 0e:bd:29:92:c2:40:52:0b:72:6b:6f:48:6a:76:17: bd:8e:ba:59:93:32:53:30:28:b1:ad:3b:71:b9:fd: a4:71:8d:34:8c:b5:36:b2:77:97:b0:93:54:8b:c3: c2:e2:6c:be:57:5f:f7:41:b0:e7:f2:f4:af:c9:e2: 50:64:30:a8:0d:1b:8d:8d:29:6f:f1:28:af:0a:9e: 2c:c3:f1:c4:1a:68:74:49:c1:64:be:1d:81:7c:ed: f2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:11:15:A2:4E:AF:FD:2C:69:6C:06:51:7E:8F:84:7D:45:AD:2F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0445ba-264f-3e95-8963-7b44e2dea9ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:22:2b:44:e6:23:e6:7a:16:17:a0:1f:0d:22:67:0f:4a:d0: 68:bf:b0:b1:8e:1b:b7:de:2d:7e:79:e3:15:93:81:c3:22:d5: f4:43:78:ac:c5:65:6d:7d:f7:00:8c:db:e6:4b:79:56:ad:27: ac:ff:a9:7b:e6:ac:8d:bd:c4:15:6b:af:e6:c4:78:07:d2:7c: 8f:6d:46:42:c2:47:b5:20:e3:f5:86:fc:26:f5:5a:f1:a8:21: df:43:d2:35:ba:9c:d1:5c:5d:cd:1c:20:9f:16:7f:b1:03:8e: 39:bc:71:3c:ee:25:66:bb:02:14:1b:38:4d:52:41:eb:f3:27: b7:52:0f:d7:1a:f7:78:3b:0a:23:45:42:b1:44:f2:ef:30:e9: 96:8a:ae:51:4f:cc:88:3b:5e:c4:b1:af:d2:07:3b:8f:5d:f5: 4e:c7:c4:dc:8f:e9:ae:21:34:84:bf:13:ae:89:29:39:57:74: 16:b4:d2:b9:b4:85:0f:18:90:5c:d0:12:a7:5c:a2:4c:03:8b: 94:66:b2:ca:0b:44:18:1a:1a:50:71:a1:6d:9e:30:9a:ef:8b: fb:45:79:1f:6a:2b:a0:c2:18:11:d4:4d:84:0f:1f:7d:0d:f4: 00:19:c3:40:5b:da:ac:90:13:a3:cc:8d:47:0c:75:d6:7f:fe: dc:6e:35:26 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB+2+w9zozLrmNiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk M2E0OGQzYjMtOGViYy00MTVmLTllYjktMzc3YjM0OGQ1MGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhlsY/+iv0Ehfthwj6ea1Cp6cDpUyl5xY+n6 zj28V5FlrPPREMeyxqUknh5qN1lCBBsfll4CnGp2IHg2Gq8+D22fx88vkvd2eCUh +DfhSaVM0i3aaZDQblBSut1Bp8Mz6h4Tu9zXTevzmCEBfsnY7Py6nAqSRrS8NJcO 48+prfNBXCGsjDkVZZHX6KzDIINO6EUpmZdjsFXgiYHf1OB7aYAvJj0OvSmSwkBS C3Jrb0hqdhe9jrpZkzJTMCixrTtxuf2kcY00jLU2sneXsJNUi8PC4my+V1/3QbDn 8vSvyeJQZDCoDRuNjSlv8SivCp4sw/HEGmh0ScFkvh2BfO3yCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAIRFaJOr/0saWwGUX6PhH1FrS8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmQwNDQ1YmEtMjY0Zi0z ZTk1LTg5NjMtN2I0NGUyZGVhOWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARIitE5iPmehYXoB8NImcPStBov7Cxjhu33i1+eeMVk4HDItX0Q3is xWVtffcAjNvmS3lWrSes/6l75qyNvcQVa6/mxHgH0nyPbUZCwke1IOP1hvwm9Vrx qCHfQ9I1upzRXF3NHCCfFn+xA445vHE87iVmuwIUGzhNUkHr8ye3Ug/XGvd4Owoj RUKxRPLvMOmWiq5RT8yIO17Esa/SBzuPXfVOx8Tcj+muITSEvxOuiSk5V3QWtNK5 tIUPGJBc0BKnXKJMA4uUZrLKC0QYGhpQcaFtnjCa74v7RXkfaiugwhgR1E2EDx99 DfQAGcNAW9qskBOjzI1HDHXWf/7cbjUm -----END CERTIFICATE-----Generated at Thu Mar 26 10:53:17 2026 by rpki-client